Aggregator

A critical pre-authentication remote code execution (RCE) vulnerability in Marimo is now under active exploitation, leveraged for credential theft. [...]

4000 промышленных контроллеров висели в интернете. Заходи, кто хочет.

Hackers breached Venice ’s San Marco flood system, claiming control of pumps and the ability to disable defenses and flood coastal areas. The technologies that govern the physical world are the quiet infrastructure of modern life. From energy grids to water systems, from factories to flood defenses, operational technology (OT) has long had one essential […]

266 дней на закрытие дыры. 2 дня на её взлом. Наша защита официально объявляется устаревшей.

韩国三大移动运营商 SK Telecom、KT 和 LG Uplus 将为逾 700 万移动用户提供 400Kbps 的基本数据传输率。当用户使用的流量超过了其每月限额之后，他们的移动传输率将降至 400Kbps，但不再有流量限制。400Kbps 可能不太适合刷短视频——标清视频需要 5 Mbps 左右的网速，但对于浏览网页、收发短信、VoIP 语音通话是绰绰有余了。此举意味着用户的月流量耗尽之后不会被强制断网或者收取高额流量费用。三大运营商还承诺增加老年人的数据和通话流量。这些措施是运营商们在去年发生一系列安全事故之后采取的补救义务行动。

Звучит как фантастика — но физика не врёт.

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Thirty-Six Malicious npm Strapi Packages Deploy Redis RCE, Database Theft, and Persistent C2   Malicious LNK Files Distributing a Python-Based Backdoor and Changes in Distribution Techniques (Kimsuky Group)   Hackers Are Attempting to Turn ComfyUI Servers Into a […]

Discover the implications of the 19 billion passwords leaked in the RockYou2024 breach. Learn essential actions to secure your accounts now!

The post 19 Billion Passwords Leaked: Protect Yourself from Cyber Threats appeared first on Security Boulevard.

Ваш ИИ-агент тупит. Не потому что плохой. Потому что вы не знаете, где у вас вообще лежат данные.

FBI Atlanta and Indonesian National Police dismantle W3LLSTORE phishing market linked to $20M fraud, seizing domains and detaining developer.

Currently trending CVE - Hype Score: 1 - Relative Path Traversal vulnerability in Apache Solr. Solr instances running on Windows are vulnerable to arbitrary filepath write-access, due to a lack of input-sanitation in the "configset upload" API.  Commonly known as a "zipslip", maliciously constructed ZIP files can use ...

关键词黑客欧洲铁路旅行公司Eurail正在通知超过30万人，其个人信息在2025年12月的数据泄露事件中被盗。

关键词漏洞RSAC研究人员发现一种高成功率绕过苹果Apple Intelligence AI安全协议的方法。

关键词恶意木马玩 PC 硬件的人，几乎没人不用 CPU-Z 和 HWMonitor。

Инфостилеры, теневые базы и чужие аккаунты. Как работала кража сессий и почему больше это не работает.

网络威胁情报狩猎综述，希望您喜欢！